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Remarks 

Applicant and the undersigned would like to thank the Examiner for his efforts 
and guidance provided in the examination of this application. Claims 1-10 as originally 
filed remain in the case. 

The examiner objected to the specification as originally filed and presented a 
preferred layout. A close examination of the specification as filed will show that the 
preferred outline was used. However, in the interest of clarity and currently preferred 
paragraph numbering, a replacement specification is herein submitted. Also, only those 
applicable sections of the specification are included as guided by 37 CFR §1 .77(c). No 
new matter is added by this amendment. 

The title has been modified to read "METHOD FOR SETTING AN ENCRYPTION 
KEY FOR LOGICAL NETWORK SEPARATION". As requested by the examiner, the 
description of SetNEK is further clarified. No new mater is added by these 
amendments. While the Examiner objects to the use of the acronyms DEK and NEK in 
the claims, DEK and NEK have clear support in the specification. The Applicants and 
the undersigned are reluctant to amend the claims until it is clear to the Examiner that 
the claims in the case clearly distinguish over the known and cited prior art. 

The Examiner rejects claims 1-10 under 35 USC §1 02(e) as being anticipated by 
US Patent No. 6,987,770 to Yonge, III. Respectfully, the Applicant and the undersigned 
traverse the rejection under 35 USC §1 02(b) as being improper in that the cited 
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reference fails to contain every element and limitation recited in the claims. As 
supported by MPEP §2131 , a claim is anticipated only if each and every element as set 
forth in the claim is found, either expressly or inherently described in a single prior art 
reference. Contrary to the Examiner's assertions, the claimed invention is not 
anticipated by Yonge 770 and the rejection under 35 USC §1 02(b) should be 
withdrawn. 

By way of example, and with reference to Par 17 of the replacement 
specification, the procedure outlined by Yonge 770 generally follows that which has 
been outlined in the specification as originally filed and identified as "Procedure A." The 
procedure outlined in Yonge 770 for remotely setting the NEK of a new device does not 
teach nor does it suggest determining the MAC address of the a device, or a remote 
device as called for in independent claim 1 as originally presented. Such a 
distinguishing feature is accomplished by the claimed invention. Without knowledge of 
the MAC address, the controlling station cannot resolve whether the NEK is set properly 
for the new device, particularly since the transmission of a ConfirmNEK is optional. 

The invention disclosed describes a method through which the controlling station 
does reliably determine the unique MAC address of the new device. This is 
accomplished by use of a temporary NEK, also called for in independent claim 1 . As 
supported in the specification (Par 26 by way of example), since the controlling station 
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sends a Stats Request with the temporary NBA only the 'now device 1 will respond, and 
hence sis MAC adc will be *--n vn Dep* ami claims -9 add furtw features ■? J 
limitations and they too are fee to distinguish over the cited reference. 

Applicants respectfully submit that the above ai'vendrnents place ties application 
In a condition for sllowanee ; and passage to issue Is respectfully solicited . The 
Applicants and tno undersigned would like to again thank the Exandner for his efforts 
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of il'ie application can he facilitated through telephone Indevlew between ino Examiner 
i i i\ o* i.yiv n N a i i r i u { bi^ oU * > t ^ h i i i i^k ti ^ 
Examiners convenience. 
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[OOOIjT'hiS application claims ^^¥-4fefff|he ppytyP ^..Provisional Application, 
Penal No. SOP; 1 Y.,PPT hied September 25 : 2002. : . Jh a...-;;:! ;MOp^El...pL::PEORM..lET;:lk^ 
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ilpP)2|The Invention relates to systems and methods for grouping communications: 
t ..I \ rk; N > k! cam ig the logical struct 

v»\ f » \ k n v M a v ^ % ^ 1 The 

invention Is applicable to the field of power line networking, arid particularly to the 
speciPcatlona set out in the HomePiug POP Specification of the HomePiug Power 
APance, incorporated m-m by reference. 

|0003 ['The technique of home networking over residential power Pies has received 
considerable aPamion In recent yearn. The HorriePmg Powonine Alliance, for example, 
h ahlmhedn i-opes /or! \ mi. a 1 > t mui \ 
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are I ^ s u i t if t v t > c s 

<. s w n *K iln i! ihm uMi! ~ I , <s i < I o i o 

m j > I t, * i , i ij h a 

network protocol to which all makers of ■■ ' ,:■ compliant devices must , -i The 

s < \i\ ( i ! v as? , W m ib 

physical medium, and to facilitate, as much as possible, communication between the 
devices, it wsli be helpful N iubodsce certain concepts and terminology Pom the 
HomePlug pa^ before describing the details of this Invention, 

O -spp b, Fhe h. ou ;g selective! introduces some temdnoiopy In 

1 v* * i 1 l v np 

\ s Ma - - . u > < , 

I o^iea! Nouwrh in 4i,s\x - . v 1 p t ,| 

is > | « U «. v t i m i ! 

^ ! w ^ o si { \ n , > - ){ , , t 
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group. Such groups of logically separated PPC devices or network nodes are referred to 
ec :: begical NeassPsP 

USSIFhe concept of Logical Networks is important for instance. In the case cf two 
neighboring apart merits that share the same infrastructure of electrical wiring. Suppose 
that true families in each apabrneni establish a network of PLC devices. Without the 
concept of Lose a I Networks, PhC devices in <: ;s apabrneni could intercept, messages 



from KC locoes sn he ^.gnUisn, * } nun m I !kn ir ama v> r 
mediyiri. 
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Key, This key is known only to devices within the logical network, and thus provides 
security from intruders. 

•Xu ^ i > > to HomeRug 

i . -a " \ i i) tir - on > x\ f 1 f < !x c 

Key : a device encryption key may be used to enerypt'decrypt messages such that only 
other PLC devices with knowledge of the same DEK car; communicate with the present 
device. 

j 1AC Management Erft|y.(MM* } ... :rh< \ 

u hi .1 i t > * , i and 

established and managed, by the participating PLC devices. The acronym MAC stands 
t>» k- lUirAc s.s \«n roi rn a C j= , ue k \ h , 
In response to ce < i MAC N> ag se he nMK - ) Son* IE-Is thai are of 
ab s \ > ih < fti n t - 

SetNEK \N 1 < i eh s "->v 

defined behavior Is to set its Network Encryption Key to mas 

) m the r F f ir h K - si :e$« ui 
th C dex ov he pre \ to trans - Coo 



MME. to notify the requesting unit of the success of the 
procedure, 

ConfirmNEK: The ConfirmNEK MME is sent in response to a | 

So: : VAM if setting me Network Encryption Key was indeed 
done successfully ai the node that received the SeiNEK 
request. 

5 , v * - K< cm-: K cons,. < 1 i ■ t > j 

IK ceiyei mcl a sues is c rc ted to si a 
Amu Response MME with the said network statistics and 
•parameters; 

„ StatsResponse: The SmisResiponse MME is sent In response to the I 

StatsRequesttoMi 

>tatton I 

i 

refers to a pa < it < tc s , iU > j! \- ^ 

Hi i Mi -vA n u _ i SO 

MAC Af'ci^i A \ A a, ^ t^ - ^ i •,< f > m -n ui * P T :i- <^ m ^ | 

participates in a given network. Knowledge of a node's MAC address enables any other 
node in the same iogieai network to direct a message directly to the node of said 
address, 

Universal Broadcast- A message with the destination address field sel such I 
thai any listening node may receive the essage. Note that a broadcast message a> 
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1 so d ( oper decrypt >n 
deeypher the message. 

v >^a*a ' it > t ^ > ( i U} 
destination address field set to the MAC address of a unique node. 

{s^SO'dBeQioie . Set have beer; made in the 

'!{•>, m 0 i ' K f tu ' x i 1 t m; A 

. J r> ■ il , ^ a Ik <> . h > , u { 1 < ~o > , < a , with 

to Fk ills st . am 

As sh<?v in Fig network o/e> sat so is of twe > i 

l , I IAk 1 <x N * «v o » . x.U il i i >- I -i PLC 

^ > ft ! N titL \f > -I 11 10! - U h \ < f o \ ll 1 !o ! 

etwork 2. th( >liowing pro iui y be applied in accordance to tr Hos if* 
protocol This procedu > e d I Frocea 

1. The conrroiiing station prepares a S&iNEK MME (with the NEK to be set 
t< i <• vEi a ) f ^ d c t - ^ v 

the fi ?e c a'iep i d m\h il avsc En , \o\ o Node ana 
transmitted, 

2. Node A a v> i v > < i < „, i, < ^ N >- a ; v s 
obtained Irs the dE of Sit 1 and re v~ with s L mn N£h. 

\\, , l ~ of" - i <; \< t v > k , Xf t *\ t <N r 



due to the fact th if fh< \ do no} have the pmpe levies anc yi ti< to 
decode the massage, 
3. v s r ! i o 

r - • > N f > - i iJM . i ? *uiw _ ? =bwj 

o> the proper execution of ail sieps, Procedure A presents an efficient 
11 u hi s t it » <> lf -, 

The problem with Procedure A is thai the transmission of a ConfirmNEKts defined as a 
host function in the HoniePiug 1.0.1 Specification (the host is the device thai is 
n l r n h it ! , a it > - _ 

ecte to a ietv\ < via a PLC evice m son <<> putei so is ered e i 
device), os devices are nc 1 r ^ to the HomePiug 1 < specification, there?ore : it 
s \> i !i< n *he? tccv <. a JtrM. -I m r 1 .v „ i 

V ut > d pf p<. nP < \t j > i < a i 

jimdiabp . t . < v i, w :. «v 

1 ^ i > ! usirateci by the i ex s jplicaH >ced 

Referring > Fk consicte i icai Nc tc aoilectio c PLC -in 

Apartment 1, and Logical Network 2 to be a collection of PLC devices in Apartment 2, 
which ?.h itos the residenh'a! gov line net v. h with dj a men! 1 a new PL.w w vie; s 
to d! I i nr, 1 t t e t \] new 

devices will have a default Network Encryption Key : thus when the new PLC device is 
first 2 - ember of a thii 

Network, iabeled Logical Network 0 in Fig. 2 To integrate the new device into tee 
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Naiwork 1. Suppose a < m> !i m w: - -< , ^ wotk M w.^m Fam o - A, 

Suppose Step 1 executes, bus Smp 2 does not. Then, older devices in Logical No? work 
1 may not communicate with the new device using the Network Encryption Key of 
Logica; Network 1 . and the network remains ncrvseoure. 

dv dm 

~ ^ present invention provides a system method tor i , s > Looioai Network 

! * > \ h r t i 

n \ \ u • in * s ^ nth r i . \ i N> > m 

Pi N i t <V mP mw t " im n v ^ ; f r » t > »t ■» 
Key, however, they are prone 10 error, because they rely on a particular exchange of a 
c\ <. ^ ( , x o w < a L < i i of 

> ^os? < s VP ? exchange of Sard and ( N -s - The 

desired Logical Network Struchse is not achieved. 

119:111^ present invention removes the reliance of the procedure on the exchange or 
a Sedv£d<i and Nocsrm/VeK request. This makes the method described by the oresent 
invention more robust and more practical for ma! PLC devises. 
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■ th« pr< ' ent invention. 

MTAjLED. DESCRIPTION - • > F: fvl BODIMENT^ 

A u 1 us if si <. sr - m^ , i«?«fcm , v< k , « <>xai -\ h r the 

-1- r pi « > t > n> > r> * J i 0 i r 

w;;h the following dravdng : in which 

Fn i-- i«' m i } t i. nf^ u ^ f ^ c 1 ^ 

»- , ^ L t. i i I if lit tf ! , 

he preferred embodin < in nt i i ci scriptiof >f Procet 

Referring to Fig. L Procedure B describes the necessary steps to move Node A from 
Logical Network 1 to Logical Network 2. it should be noted that Procedure 8 can be 
l -u'h s-l ^ % > T ! ^- ,n a 1 t v ik t ^ri\ cL „ of 

Logicai Networks, as illustrated in Fig ? 

Ut^eLe s 

1. The controlling station prepares a SetNEK MME as a universal broadens? 
n sage d the rm i cryj d ith n evice En< ittoi of 
Nods A and transmitted. The value of the NEK in the MME is set to refer 
to a temporary Logical Network that is used solely in the context of the 
o ^ - c <\ a n 



It is required that the value of the NEK for the temporary Logical Network 
does not equal the recommended default NEK as defined in the 
HomePlug Specification. Preferably the value of the NEK is selected 
randomly from the set of all possible NEK values, except the 
recommended default NEK defined in the HomePlug Specification. 

2. The controlling station prepares another MME for universal broadcast 
which is encrypted with the NEK for the temporary Logical Network as 
determined in Step 1 . For example, the controlling station may transmit a 
StatsRequest MME. 

3. The StatsRequest MME is received by Node A, which at this time is 
logically placed in the temporary Logical Network. Node A responds to the 
StatsRequest MME by preparing and transmitting a StatsResponse MME. 

4. The controlling station receives and processes the StatsResponse MME. 
Since there is only one member in the temporary Logical Network 
(besides the controlling station itself), there is only one StatsResponse. 
From the StatsResponse MME, the controlling station extracts the MAC 
address of Node A. 

5. The controlling station prepares a SetNEK MME as a direct message 
(unicast) for Node A. The message uses the MAC address of Node A 
retrieved in Step 4, and is encrypted with the Device Encryption Key of 
Node A. The value of the NEK in the MME is set to refer to Logical 
Network 2. 



9 



6. "The • uMii * : s prepares a a;-i\ KKW encrypted with Pie 

5 < > > I I it f < f 

Us» A \ t I no. " N ' • «Ji.^/ i> N 

7. The ,vV,i MME u. r - -o by Node A ; which ar this \ is 
! . v I < * 1 a t the 

SlatsRequest MME by preparing and transmitting a SaasEespooee MME. 
S. The eontrsisng station receives ana processes the Saas/Teapeese My IP. 
it a tru.se confirmed that Node A is correctly pieced in Logical Network 2. 

and dneaeesp" w r MME,. between the controlling; station and Node A. The exact 
nature of l \ MME , is no? crucial nc main requirement is that n cr ai' 
first MME : invokes a response MME from the recipient. The actual purpose of 
*rNchanci .." s t;g 

tl , i , a m « t V it 

• : < : - < - st , - the 

controlling station thai Made A Pas successfully set its NEK to ids NEK corresponding 
to Logical Network a 
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WHAT IS CLAIMED IS 



1. A method for determining MAC address for a remote device having a 
known, unique DEK in a network where devices may not send a confirmation to a 
SetNEK request, the method comprising the steps of: 

preparing a broadcast message with a SetNEK request containing a 
unique, temporary NEK; 

encrypting the message with the DEK of the remote device; 

transmitting the broadcast message on a network medium; 

confirming receipt of the temporary NEK by sending a request that 
requires a response from the remote device which is encrypted with the temporary 
NEK; and 

determining the MAC address of the remote device from the response. 

2. The method of Claim 1 wherein the remote device is not a member of a 
network. 

3. The method of Claim 2 further comprising the step of using the MAC 
address of the remote device in a unicast transmission to reliably confirm receipt of the 
temporary NEK. 

n 



4. The method of Claim 3 further comprising the step of using the MAC 
address of the remote device in a unicast transmission containing a SetNEK message 
with the local NEK. 

5. The method of Claim 4 further comprising the step of using the MAC 
address of the remote device in an additional unicast transmission which is encrypted 
with the local NEK, for purposes of confirming receipt of the local NEK. 

6. The method of Claim 2 further comprising the steps of: 

using the determined MAC address to reliably send the local NEK, 
preparing a unicast message to the remote device containing a SetNEK 

request where the SetNEK request contains a unique, temporary NEK 

encrypting the unicast message with the DEK of the remote device; 

transmitting the unicast message on the medium; and 

confirming receipt of the temporary NEK by sending a request that 

requires a response which is encrypted with the temporary NEK 

7. The method recited in Claim 1 , wherein the network is a powerline 
network. 

8. The method recited in Claim 1. wherein the remote devices are 
implemented according to the HomePlug Powerline Alliance standard. 



9. The method of Claim 1 wherein the request is a request statistics MME 
and the response is a statistic response MME. 

10. The method of Claim 1 wherein the request is a request channel 
estimation MME and the response is a channel estimation response. 



1 3 



ABSTRACT 

A system and method is described for reliably transferring a node in a 
communications network from one Logical Network to another Logical Network. The 
system and method is reliable and robust with respect to potentially varying 
implementations of host devices in the communications network, and is compatible with 
other network management operations as specified in HomePlug Specifications. 
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